Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa
File:                     792BA6283AAC11EF93D3E072C4F9AE02.roa (raw, json)
Hash identifier:          s2bVsrhzb1oO7nVURRzU8xORUuB8waybrIzRlSHVXRY=
Subject key identifier:   4A:C8:93:F0:8C:6C:D6:0B:AE:D9:0E:18:E0:0F:C8:97:84:F6:48:68
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       2051
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:12:54 +0000
ROA not before:           Sat 30 Aug 2025 16:35:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     64079
IP address blocks:        203.56.50.0/24 maxlen: 24
                          203.56.51.0/24 maxlen: 24
                          203.86.118.0/24 maxlen: 24
                          203.86.119.0/24 maxlen: 24
                          203.86.120.0/24 maxlen: 24
                          203.86.121.0/24 maxlen: 24
                          203.86.122.0/24 maxlen: 24
                          203.86.123.0/24 maxlen: 24
                          203.86.124.0/24 maxlen: 24
                          203.86.125.0/24 maxlen: 24
                          220.247.138.0/24 maxlen: 24
                          220.247.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8273 (0x2051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Aug 30 16:35:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48fb6-be40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:cf:03:4a:61:cb:5e:ec:8d:0d:ae:77:ae:
                    d0:69:75:0d:fd:cf:b6:81:9c:d6:76:e6:e0:24:67:
                    7c:02:f5:a2:31:be:98:ab:60:b6:79:92:fe:e8:21:
                    90:92:aa:18:72:ca:56:bf:c9:4d:9b:d4:f2:7f:3a:
                    92:1a:e5:1c:83:b5:a4:b7:b6:9f:ab:8b:c6:30:60:
                    61:d0:1d:6b:63:5f:1b:38:3d:2f:c5:3b:7a:ee:fd:
                    b0:42:a4:b3:10:a6:6d:d5:aa:7e:07:4b:02:99:d4:
                    3b:c3:88:91:13:74:26:02:83:e7:6b:78:f7:f9:d4:
                    c3:fd:2a:a7:7c:98:b3:e1:9b:d4:bc:2d:bd:2d:cb:
                    0f:3d:da:dd:f1:d9:f7:0a:98:56:07:38:d7:9b:49:
                    67:94:91:68:c2:9d:2a:d1:5f:2f:e2:ed:08:2a:43:
                    c9:a6:27:13:5e:4d:c1:4b:79:b7:8b:85:20:e8:45:
                    18:c0:63:e2:f3:bb:2a:aa:ef:01:3b:65:0d:f8:37:
                    af:4a:66:82:09:b9:8a:e7:76:3a:52:c2:75:3e:31:
                    04:b7:ad:39:f9:3b:d9:b5:07:86:a3:ef:88:56:15:
                    49:6b:5c:a3:9c:44:d1:ee:b4:3b:80:ae:9d:bd:a2:
                    cf:87:1a:39:cb:ab:9a:83:51:b5:b8:08:1b:b4:bc:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C8:93:F0:8C:6C:D6:0B:AE:D9:0E:18:E0:0F:C8:97:84:F6:48:68
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/792BA6283AAC11EF93D3E072C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.50.0/23
                  203.86.118.0-203.86.125.255
                  220.247.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:68:5c:15:f7:25:0e:60:40:3e:dd:2f:2c:f3:e1:9d:f8:
         6a:c5:b5:bb:d5:6e:7d:53:dc:fe:65:cd:6b:4a:08:53:c0:72:
         07:a3:a3:b5:5e:9b:b9:49:b2:14:e8:f8:b1:9c:7a:97:f0:2f:
         ba:68:dc:36:db:58:2c:36:24:35:e8:96:89:0f:a2:91:ac:97:
         39:e2:1d:36:fb:f3:31:22:91:b8:79:ff:f9:58:bf:46:d2:3d:
         af:a6:b7:0a:a6:98:a8:07:8d:90:fb:70:42:de:49:46:dd:61:
         4a:4d:0c:b9:38:3f:f1:95:de:fc:f1:8b:68:45:c1:ee:c2:62:
         6c:d5:30:34:0e:52:bc:52:fb:b6:9b:c9:cd:f7:eb:ec:35:28:
         ee:40:37:5b:f9:d0:65:ca:94:78:4b:93:cd:46:6f:f8:0d:4c:
         b4:00:17:f5:dc:05:75:bb:8e:ac:e1:2e:b3:dd:d6:43:bf:a5:
         50:5f:a1:42:53:5c:ef:e2:52:a6:58:9e:88:4d:47:0f:a5:88:
         a0:7b:99:80:25:f3:fb:8b:68:ea:33:b5:26:f1:49:cb:6e:a5:
         da:56:aa:30:cb:63:c7:f0:43:1d:d8:a1:d6:ef:4c:3a:52:6a:
         dc:6b:00:50:91:97:42:68:64:7a:93:de:53:81:7c:2b:2a:23:
         17:bb:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:47:04 2026 by rpki-client